Security
Practical handling, not a badge wall.
Last updated 26 August 2026. This is how we treat information. It is not a claim of ISO 27001, PCI DSS, or any other certificate for Lintel.
Access
We ask for the least access that will do the job. Prefer a time-limited account over a shared master password. Prefer a walkthrough over a dump of production data you do not need us to hold.
Secrets
Do not put live passwords or card numbers in ordinary email if there is another path. If you must send a secret, say so in the message. We do not keep secrets in the public website, in a public git repo, or in a chat that is not the agreed channel.
Machines
Work happens on locked devices and on accounts we control. We do not copy your production database onto a personal laptop “for convenience” unless the scope requires a local copy and you have agreed.
When the work ends
We revoke access you gave us. We delete working copies we no longer need. We keep only what the privacy policy and the engagement say we must.
Incidents
If we learn that your material was exposed through us, we will tell you promptly and say what we know. Write to hello@lintelworld.com if you think something is wrong.